CVE-2024-6697: Hitachi Vantara Pentaho Business Analytics Server - Improper Handling of Insufficient Permissions or Privileges
First published: Wed Feb 19 2025(Updated: )
The product does not handle or incorrectly handles when it has insufficient privileges to access resources or functionality as specified by their permissions. This may cause it to follow unexpected code paths that may leave the product in an invalid state. (CWE-280) Hitachi Vantara Pentaho Business Analytics Server versions before 10.2.0.0 and 9.3.0.9, including 8.3.x, do not handle invalid and missing permissions correctly, resulting in a denial of service. An adversary leverages a legitimate capability of an application in such a way as to achieve a negative technical impact.
Credit: security.vulnerabilities@hitachivantara.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Hitachi Vantara Pentaho Business Intelligence Server | <10.2.0.0<9.3.0.9>=8.3.x |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2024-6697?
CVE-2024-6697 has been assessed as a significant risk due to improper handling of insufficient permissions, potentially leading to unexpected code execution.
How do I fix CVE-2024-6697?
To address CVE-2024-6697, update the Hitachi Vantara Pentaho Business Analytics Server to version 10.2.0.0 or later, or 9.3.0.9 or later.
What products are affected by CVE-2024-6697?
CVE-2024-6697 affects the Hitachi Vantara Pentaho Business Analytics Server versions 8.3.x through 10.2.0.0.
What are the consequences of CVE-2024-6697 exploitation?
Exploitation of CVE-2024-6697 can potentially allow unauthorized access to resources, leading to an invalid state of the application.
Is CVE-2024-6697 a common vulnerability?
CVE-2024-6697 represents a common type of security vulnerability related to insufficient privilege management in software applications.
- collector/nvd-api
- source/NVD
- agent/references
- agent/weakness
- agent/description
- agent/type
- agent/author
- collector/mitre-cve
- source/MITRE
- agent/title
- agent/severity
- agent/last-modified-date
- agent/source
- agent/first-publish-date
- agent/event
- agent/tags
- agent/softwarecombine
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/hitachi vantara
- canonical/hitachi vantara pentaho business intelligence server